← Database

CVE-2008-0065

CRITICAL CVSS: 10.0 Published: 2008-01-22 Modified: 2026-06-16

Description

Multiple stack-based buffer overflows in in_mp3.dll in Winamp 5.21, 5.5, and 5.51 allow remote attackers to execute arbitrary code via a long (1) artist or (2) name tag in Ultravox streaming metadata, related to construction of stream titles.

Affected Platforms

Winamp Nullsoft Winamp

Weakness Type

CWE-119

References